Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/8I-T0SAa0Aq_73NiYmLeAZeA6-8.roa
File: 8I-T0SAa0Aq_73NiYmLeAZeA6-8.roa (raw, json)
Hash identifier: EcYbc0JJhYj9cueeOUOF6D2ImbWnBSB3mqW1Q4k/8AY=
Subject key identifier: F0:8F:93:D1:20:1A:D0:0A:BF:EF:73:62:62:62:DE:01:97:80:EB:EF
Certificate issuer: /CN=2a079d3c3dc24e987bf70c4a9fabba405b083a45
Certificate serial: 01A03D2C9819A1D62B10721B836B641E50DF
Authority key identifier: 2A:07:9D:3C:3D:C2:4E:98:7B:F7:0C:4A:9F:AB:BA:40:5B:08:3A:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/8I-T0SAa0Aq_73NiYmLeAZeA6-8.roa
Signing time: Wed 26 Aug 2026 08:25:27 +0000
ROA not before: Wed 26 Aug 2026 08:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198795
IP address blocks: 46.31.69.0/24 maxlen: 24
66.9.124.0/24 maxlen: 24
66.9.125.0/24 maxlen: 24
77.236.120.0/21 maxlen: 21
103.73.32.0/24 maxlen: 24
195.14.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:2c:98:19:a1:d6:2b:10:72:1b:83:6b:64:1e:50:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a079d3c3dc24e987bf70c4a9fabba405b083a45
Validity
Not Before: Aug 26 08:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f08f93d1201ad00abfef73626262de019780ebef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:c4:7b:8d:b0:9c:1f:ed:a9:19:17:68:50:
25:00:ef:9a:ed:4a:c9:d3:67:07:b6:ef:17:db:f3:
86:91:f7:34:7a:00:e1:16:1d:09:84:67:46:26:b1:
65:c0:a2:eb:01:12:8c:3e:c2:01:ec:eb:5e:91:9e:
d9:87:08:58:8f:c0:bc:1d:a2:fd:27:0f:63:cb:dc:
ff:28:d4:cb:f6:e7:80:9c:a3:23:89:d1:37:90:2a:
8b:b3:3c:b5:82:69:02:c0:4b:8e:0e:d8:b5:ea:e0:
10:63:79:ce:20:91:a3:ae:0d:fd:bc:50:81:2a:cf:
22:16:3e:0e:3d:d3:69:b7:48:68:17:e0:61:95:85:
c8:66:80:46:94:15:bd:c2:f3:ee:50:cb:df:b6:17:
e8:bb:c0:09:5c:da:62:0e:98:46:1b:bf:2f:cc:8b:
88:df:85:5a:ab:f7:34:55:8d:da:dd:2e:13:0f:91:
4a:56:8f:3c:e0:9b:20:3a:ba:83:f3:b4:cd:8a:d5:
fc:6a:2c:cf:f1:b0:65:d3:d4:1e:97:4b:21:af:d8:
ce:34:46:d5:51:34:ec:fb:eb:c5:3d:2e:a6:2d:fc:
d8:a6:7c:a6:95:46:7d:26:9f:54:c9:64:55:f4:8a:
9d:03:91:78:10:8e:7d:4a:c7:3d:6b:c3:41:2d:b9:
dd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8F:93:D1:20:1A:D0:0A:BF:EF:73:62:62:62:DE:01:97:80:EB:EF
X509v3 Authority Key Identifier:
keyid:2A:07:9D:3C:3D:C2:4E:98:7B:F7:0C:4A:9F:AB:BA:40:5B:08:3A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/8I-T0SAa0Aq_73NiYmLeAZeA6-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.69.0/24
66.9.124.0/23
77.236.120.0/21
103.73.32.0/24
195.14.19.0/24
Signature Algorithm: sha256WithRSAEncryption
40:e3:04:89:a9:b6:c2:ce:f6:a0:f4:be:4c:3e:37:80:fe:90:
39:54:e7:e6:35:b1:3c:c6:fe:a2:e6:23:29:f1:99:46:99:b0:
f3:ce:c4:0b:fe:59:30:85:b2:c1:6d:46:53:79:1b:06:aa:74:
3e:f3:71:95:1c:3b:12:a5:c0:3f:5f:13:41:a2:bb:f5:89:41:
26:47:ef:bf:67:87:f2:fa:24:81:36:58:26:aa:68:92:5a:7a:
dc:be:4a:15:4a:de:97:0d:25:98:97:1f:08:bb:0c:5c:50:c4:
3a:2b:bf:cd:f6:cf:ab:fc:43:15:07:e8:52:c4:27:92:20:48:
93:3a:63:15:fd:56:18:7b:3d:4d:87:1f:d4:85:22:a0:03:2b:
0c:bf:d4:40:fe:3f:40:b9:f4:92:98:98:fd:74:35:05:fe:c1:
9d:4d:0a:37:af:59:4b:55:16:fb:8e:62:c3:96:0e:38:1a:72:
ab:62:9d:bf:93:fa:3a:18:7c:15:6f:6d:8c:5d:b2:0c:a8:bf:
f2:95:a9:57:c1:9b:56:25:1a:ce:e7:3e:45:1f:e1:ed:c6:22:
1c:79:d6:64:89:ae:ab:0d:5b:85:2c:57:15:e7:1d:67:ee:5a:
82:9d:a3:1a:89:a4:98:3a:51:33:d2:0a:5d:fd:82:5f:25:c1:
6e:5b:e4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:12:08 2026 by rpki-client